SMS dit: SQL injection attacks and defense